$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: I3bqWMeWni5zD3SqHGz5ZTQCm90tjfQiJyw0J1p5l84= Subject key identifier: 3C:07:79:A9:E2:8C:CE:47:1E:C7:EC:EC:F9:7E:91:2C:93:AB:55:42 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 01BFD0013F2BCD59E59A3D0A8202289D58067E20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 08:09:28 +0000 Manifest this update: Sat 14 Nov 2026 08:04:28 +0000 Manifest next update: Sun 15 Nov 2026 09:56:28 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: ByR02Q68z3nVgZzBZwLQhEvhHrvy71QlTjZfd1hupew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bf:d0:01:3f:2b:cd:59:e5:9a:3d:0a:82:02:28:9d:58:06:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Nov 14 08:04:28 2026 GMT Not After : Nov 15 09:56:28 2026 GMT Subject: CN=3C0779A9E28CCE471EC7ECECF97E912C93AB5542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:5c:ec:23:20:96:ad:1c:9b:a7:fb:28:3b: 7c:78:1b:6e:d9:2c:e9:38:71:9a:c2:b4:23:fb:fd: 8a:b8:97:7f:43:2a:29:0b:41:09:8d:74:eb:a2:05: 1d:05:f4:85:30:bd:26:db:49:e8:65:e3:6e:ac:76: b2:e5:02:49:da:ab:14:fd:a0:89:be:5f:20:97:01: 37:d8:a1:4e:22:32:a5:4c:9c:75:22:de:5c:75:f1: df:39:ba:b0:a4:99:06:e0:d5:4c:fe:ed:ee:8b:b0: ca:41:db:77:97:45:11:68:4c:05:aa:22:76:65:0b: 16:f5:5f:33:2e:cc:a0:c9:83:a3:d8:b6:b3:66:4f: 32:c3:7b:22:e6:fb:27:54:d0:b6:83:bd:df:27:f0: e1:db:9e:a6:95:da:7b:9e:86:43:f5:4c:c3:7c:93: 68:66:ea:55:c1:1e:a7:98:ca:b0:e8:f8:0b:05:7f: 4d:e9:70:43:b3:37:e5:46:19:41:e7:ac:bc:a7:84: 37:7e:ce:27:2c:d7:35:cd:5f:9c:87:08:6e:1d:bc: 9f:9c:6e:a7:02:e5:00:be:8d:10:62:d9:1b:9d:a2: f2:74:23:1b:99:99:2a:c8:cc:01:2a:b7:0a:7e:e5: 27:56:a0:f9:51:17:d4:00:48:e3:af:33:8c:2f:a1: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:79:A9:E2:8C:CE:47:1E:C7:EC:EC:F9:7E:91:2C:93:AB:55:42 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:36:dc:bd:4b:55:fe:84:f5:cd:69:4a:24:0e:37:be:db:c1: e9:c3:a1:a3:ed:d8:a1:5f:25:5e:5d:e5:be:66:a2:c1:39:90: a2:ce:fd:cb:5c:67:5c:93:5e:62:0b:58:97:3f:64:b1:5a:e3: ad:51:90:00:37:da:2a:b6:dc:84:fe:1c:5f:44:21:2c:79:3e: d9:03:8a:65:cc:2c:a4:05:84:7e:1d:cb:58:78:c4:2f:4e:46: cb:3a:10:18:b1:e4:dc:88:b7:e0:9b:1b:03:11:5e:ed:ea:0e: c6:34:4c:cf:25:e5:66:b0:bb:6f:d8:59:07:86:cb:c1:7c:fb: 23:82:87:02:42:25:b0:d4:5e:af:de:a4:39:50:16:6f:99:6a: e5:2d:24:b9:60:00:47:47:7f:a7:02:61:b2:10:9e:f1:0e:c6: 1b:dd:56:e4:a3:d7:9f:6d:ea:8e:63:27:0c:11:7b:cf:f8:aa: 34:22:34:d9:8f:a4:db:b9:95:69:4a:6d:a2:0e:c8:0f:81:f9: 93:4d:88:89:61:a1:ab:2a:cf:2b:db:c3:a2:db:32:32:92:f9: f8:29:a7:47:91:34:f2:fd:66:50:e3:95:fa:36:eb:50:ae:62: 75:45:e1:07:1d:e5:7d:75:9a:23:56:83:cf:ff:e6:9c:74:c0: 1d:0e:4e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb/QAT8rzVnlmj0KggIonVgGfiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjExMTQwODA0MjhaFw0yNjExMTUwOTU2MjhaMDMxMTAvBgNV BAMTKDNDMDc3OUE5RTI4Q0NFNDcxRUM3RUNFQ0Y5N0U5MTJDOTNBQjU1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrx1zsIyCWrRybp/soO3x4G27Z LOk4cZrCtCP7/Yq4l39DKikLQQmNdOuiBR0F9IUwvSbbSehl426sdrLlAknaqxT9 oIm+XyCXATfYoU4iMqVMnHUi3lx18d85urCkmQbg1Uz+7e6LsMpB23eXRRFoTAWq InZlCxb1XzMuzKDJg6PYtrNmTzLDeyLm+ydU0LaDvd8n8OHbnqaV2nuehkP1TMN8 k2hm6lXBHqeYyrDo+AsFf03pcEOzN+VGGUHnrLynhDd+zics1zXNX5yHCG4dvJ+c bqcC5QC+jRBi2RudovJ0IxuZmSrIzAEqtwp+5SdWoPlRF9QASOOvM4wvoeUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPAd5qeKMzkcex+zs+X6RLJOrVUIwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA23L1LVf6E9c1pSiQON77bwenDoaPt2KFf JV5d5b5mosE5kKLO/ctcZ1yTXmILWJc/ZLFa461RkAA32iq23IT+HF9EISx5PtkD imXMLKQFhH4dy1h4xC9ORss6EBix5NyIt+CbGwMRXu3qDsY0TM8l5Wawu2/YWQeG y8F8+yOChwJCJbDUXq/epDlQFm+ZauUtJLlgAEdHf6cCYbIQnvEOxhvdVuSj159t 6o5jJwwRe8/4qjQiNNmPpNu5lWlKbaIOyA+B+ZNNiIlhoasqzyvbw6LbMjKS+fgp p0eRNPL9ZlDjlfo261CuYnVF4Qcd5X11miNWg8//5px0wB0OTm0= -----END CERTIFICATE-----Generated at Sat Nov 14 23:35:00 2026 by rpki-client